Privacy Policy

Showery Privacy Policy


www.showery.co.uk (‘our website’) is provided by Everything on Sale Limited trading as Showery (‘we’, ‘our’ or ‘us’). We are the controller of personal data obtained via our website, meaning we are the organisation legally responsible for deciding how and for what purposes it is used.


We take your privacy very seriously and we are committed to protecting your personal data. Please read this privacy policy carefully as it contains important information on how and why we collect, store, use and share any information relating to you (your personal data) in connection with your use of our website or when you buy any of the goods advertised on our website. It also explains your rights in relation to your personal data and how to contact us or a relevant regulator in the event you have a complaint. This privacy policy supplements other notices and privacy policies and is not intended to override them.


We collect, use and are responsible for certain personal data we collect about you. When we do so we are subject to the UK General Data Protection Regulation (EU) 2016/679, as it forms part of domestic law in the United Kingdom by virtue of section 3 of the European Union (Withdrawal) Act 2018 (including as further amended or modified by the laws of the United Kingdom or of a part of the United Kingdom from time to time) (UK GDPR). We are also subject to the EU General Data Protection Regulation (EU) 2016/679) (EU GDPR) in relation to goods we offer to individuals in the European Economic Area (EEA).


Our website is written for adults. We do not expect to collect the personal data of anyone under 13 years old. If you are aware that any personal data of anyone under 13 years old has been shared with our website please let us know so that we can delete that data.

What this policy applies to


This privacy policy relates to your use of our website and any contract that you may enter with us when you buy any of the goods advertised on our website.


Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Personal data we collect about you


The personal data we may collect about you depends on the particular activities carried out through our website. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender;
  • Contact Data includes billing address, delivery address, email address and telephone numbers;
  • Financial Data includes bank account and payment card details;
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website;
  • Usage Data includes information about how you use our website, products and services;
  • Appearance Data includes any video posted on our website promoting any of the goods and
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We collect and use this personal data for the purposes described in the section ‘How and why we use your personal data’ below.
Sometimes you can choose if you want to give us your personal data and let us use it. Where that is the case we will tell you and give you the choice before you give the personal data to us.
We will also tell you whether declining to share that personal data will have any effect on your use of our website or any purchase of goods on it.

How your personal data is collected


We collect personal data from you:

  • directly, when you enter or send us information, such as when you contact us (including via email), send us feedback, purchase products or services via our website, post material to our website, carry out reviews of the products on our website, or complete customer surveys or participate in competitions via our website, and
  •  indirectly, such as your browsing activity while on our website.

How and why we use your personal data


Under data protection law, we can only use your personal data if we have a proper reason to do so, for example:

  • to comply with our legal and regulatory obligations
  • for the performance of a contract with you or to take steps at your request before entering into a contract, or
  • for our legitimate interests or those of a third party; or
  • where you have given consent


A legitimate interest is when we have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own.

 

Special category personal data


We do not collect any personal data that is treated as a special category to which additional protections apply under data protection law. Marketing
We may use your personal data to send you updates (by email, text message, telephone or post) about our products, including exclusive offers, promotions or new products.

We will only send you updates where we have a legitimate interest in using your personal data for marketing purposes. This means that for certain types of communications, we do not need your consent to send you marketing information.

You have the right to opt out of receiving marketing communications at any time by:

  • contacting us at info@showery.co.uk
  • using the ‘unsubscribe’ link in our emails

We may ask you to confirm or update your marketing preferences if you ask us to provide further products in the future, or if there are changes in the law, regulation, or the structure of our business.

We will always treat your personal data with the utmost respect and never sell or share it with other organisations for marketing purposes.

Who we share your personal data with

We routinely share personal data with:

  • third parties we use to help deliver our products to you, e.g., payment service providers, warehouses and delivery companies
  • transactions involving third parties, and third-party service providers. We employ other companies and individuals to perform functions on our behalf, e.g., to fulfil orders for products, delivering packages, collecting and processing payments from you, and storing products provided by third party manufactures. These third parties have access to personal information needed to perform their duties under a contractual duty and must process your personal information in accordance with data protection laws.
  • marketing and marketing campaign service providers we use to help us run marketing campaigns, where you have provided your consent for us to share your personal data with in order for us to send marketing materials to you;
  • other third parties we use to help us run our business, e.g., marketing agencies or website hosts and website analytics providers; and
  • our bank (where required to do so to facilitate payment by you when you purchase any products on our website).

We only allow those organisations to handle your personal data if we are satisfied they take appropriate measures to protect your personal data.
We or the third parties mentioned above occasionally also share personal data with:

  • our and their external auditors, e.g., in relation to the audit of our or their accounts, in which case the recipient of the information will be bound by confidentiality obligations
  • our and their professional advisors (such as lawyers and other advisors), in which case the recipient of the information will be bound by confidentiality obligations
  • law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations
  • other parties that have or may acquire control or ownership of our business (and our or their professional advisers) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency—usually, information will be anonymised, but this may not always be possible. The recipient of any of your personal data will be bound by confidentiality obligations

Who we share your personal data with - in more detail


More details about who we share your personal data with and why are set out below.

Recipient
Alibaba.com Singapore E-Commerce Private Limited
8 Shenton Way
#45-01
AXA Tower
Singapore
Processing operation (use) by recipient
Order facilitation
Relevant categories of personal data transferred to recipient
Any of the personal data we collect about you (no sensitive or financial data)

Recipient
Shopify International Ltd
c/o Intertrust Ireland
2nd Floor 1-2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland
Processing operation (use) by recipient
Web and data hosting services, and marketing services e.g., may store your personal data on their servers so it can be accessed by us and used to send you marketing information
Relevant categories of personal data transferred to recipient
Any of the personal data we collect about you.

Recipient
Paypal (Europe) SARL et Cie SCA
22-24, Boulevard Royal 2449 Luxembourg 
Processing operation (use) by recipient
Payment facilitation
Relevant categories of personal data transferred to recipient
Your identity data (name, address, date of birth), and your financial data.

Recipient
Stripe Payments UK Ltd
9th Floor
107 Cheapside
London
EC2V 6DN
Processing operation (use) by recipient
Payment facilitation
Relevant categories of personal data transferred to recipient
Your identity data (name, address, date of birth), and your financial data

Recipient
Privy LLC
201 South St, 2nd Floor
Boston
MA 02111
Processing operation (use) by recipient
Marketing
Relevant categories of personal data transferred to recipient
Your identity data (name, address, date of birth), and your financial data

How long your personal data will be kept


We will not keep your personal data for longer than we need it for the purpose for which it is used.


Different retention periods apply for different types of personal data. We are required under data protection legislation to retain your personal data for a period of six (6) years. We are also required to keep accurate records of any products we sell and to whom by HMRC and The General Product Safety Regulations 2005.


We will delete or anonymise your personal data after seven years from the date of your last order.

Transferring your personal data out of the UK and EEA


The EEA, UK and other countries outside the EEA and the UK have differing data protection laws, some of which may provide lower levels of protection of privacy.

It may sometimes be necessary for us to transfer your personal data to countries outside the UK and EEA. In those cases, we will comply with applicable UK and EEA laws designed to ensure the privacy of your personal data.

We will transfer your personal data to:

  • Shopify International Ltd, located in Dublin, Ireland;
  • Paypal (Europe) SARL et Cie SCA, Luxembourg;
  • Alibaba.com Singapore E-Commerce Private Limited, Singapore; and
  • Privy LLC, USA.

As we are based in the UK we will also transfer your personal data from the EEA to the UK.

Under data protection laws, we can only transfer your personal data to a country outside the UK/EEA where:

  • in the case of transfers subject to UK data protection law, the UK government has decided the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy regulation’) further to Article 45 of the UK GDPR. We rely on adequacy regulations for transfers to countries in the EEA;
  • in the case of transfers subject to EEA data protection laws, the European Commission has decided that the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy decision’) further to Article 45 of the EU GDPR. A list of countries the European Commission has currently made adequacy decisions in relation to is. We rely on adequacy decisions for transfers to the counties under which the European Commission has currently made adequacy decisions, a list of which is available here;
  • there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you, or 
  • a specific exception applies under relevant data protection law.

Cookies


A cookie is a small text file which is placed onto your device (e.g., computer, smartphone or another electronic device) when you use our website. We use cookies on our website. These help us recognise you and your device and store some information about your preferences or past actions.

For further information on cookies our use of cookies and when we will request your consent before placing them and how to disable them, please see our Cookie Policy.

Your rights


You generally have the following rights, which you can usually exercise free of charge:

  • Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:

- If you want us to establish the data's accuracy.

- Where our use of the data is unlawful, but you do not want us to erase it.

- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.

- You have objected to our use of your personal data, but we need to verify
whether we have overriding legitimate grounds to use it.

  • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
  • If you would like to exercise any of those rights, please email, call or write to us (see below: ‘How to contact us’).

Keeping your personal data secure


We have appropriate security measures to prevent personal data from being accidentally lost or used or accessed unlawfully. We limit access to your personal data to those who have a genuine need to access it.

How to complain


Please contact us if you have any queries or concerns about our use of your personal data (see below ‘How to contact us’). We hope we will be able to resolve any issues you may have.

You also have the right to lodge a complaint with:

• the Information Commissioner in the UK; or

• a relevant data protection supervisory authority in the EEA state of your habitual residence, place of work or of an alleged infringement of data protection laws in the EEA.

The UK’s Information Commissioner may be contacted using the details at https://ico.org.uk/make-a-complaint or by telephone: 0303 123 1113.
For a list of EEA data protection supervisory authorities and their contact details see here.

Changes to this privacy policy


We may change this privacy policy from time to time—when we make significant changes we will take steps to inform you by including a link to a description of those changes on our website for a reasonable period or by other means, such as email.

How to contact us

Our contact details are shown below.

Showery Customer Services:

Email address: info@showery.co.uk

Address: Ground Floor Office, Unit 14, Apex Court, Woodlands Bradley Stoke, Bristol, England, BS32 4JT

Do you need extra help?

If you would like this policy in another format (for example in large print or audio) please contact showery customer services above.